ID:913 - Exploit for Null pointer dereference in Windows and Windows Server - CVE-2015-1721

 
Main Vulnerability Database Exploits ID:913 - Exploit for Null pointer dereference in Windows and Windows Server - CVE-2015-1721

ID:913 - Exploit for Null pointer dereference in Windows and Windows Server - CVE-2015-1721

Published: March 18, 2020


Vulnerability identifier: #VU5382
Vulnerability risk: High
CVE-ID: CVE-2015-1721
CWE-ID: CWE-476
Exploitation vector: Local access
Vulnerable software:
Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a local attacker to obtain elevated privileges on the target system.

The weakness exists due to null pointer dereference. A local attacker can run a specially crafted program to gain administrative privileges and execute arbitrary code in kernel mode.

Successful exploitation of the vulnerability may result in arbitrary code execution on the vulnerable system.

Remediation

Install update from vendor's website.